CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Questo contenuto è solo a scopo educativo. Utilizzare solo come riferimento e non contattare le autorità. This content is for educational purposes only. Use for reference only and do not contact the police. Dettagli della vulnerabilità CVE ID : CVE-2025-24071 Sistema...

PT-2026-82111

Name of the Vulnerable Software and Affected Versions Veeam ONE versions prior to 13.1.0.7233 Veeam ONE versions prior to 13.0.2.7159 Description An unauthenticated network attacker can coerce the Veeam ONE service account into performing SMB Server Message Block authentication. This action...

PetitPotam-notest

Rilevamento attacchi NTLM Relay di PetitPotam Un pacchetto Zeek per rilevare alcuni tentativi di innescare attacchi NTLM relay tramite l'exploit Petit Potam. Questo pacchetto rileva quelli che sembrano essere tentativi di exploit riusciti e non riusciti. Distingue tra i due esaminando il codice d...

UltraRealy_with_CVE-2019-1040

UltraRelay aggiornato da Lazaar Sami per l'exploit CVE-2019-1040 UltraRelay è uno strumento per l'avvelenamento LLMNR e il relay delle credenziali NTLM. Si basa su Responder e impack. Ho aggiornato la versione originale https://github.com/5alt/ultrarelay per l'exploit CVE-2019-1040. Dirk-jan...

ketshash

Ketshash A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs. The tool was published as part of the "Pass-The-Hash detection" research - more details on "Pass-The-Hash detection" are in the blog post:...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense Dieses Playbook beschreibt Erkennungs-, Eindämmungs- und Behebungsstrategien für CVE-2025-55234, einen kritischen Windows-SMB-Privilegieneskalationsfehler. Von Mark Mallia Einleitung In der heutigen, sich ständig verändernden Cyber-Risikolandschaft...

From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps

Dal-Foothold-al-Domain-Admin-Sfruttare-CVE-2025-54918-nel-DevOps-del-Mondo-Reale Sfruttamento e mitigazione simulati di CVE-2025-54918 vulnerabilità NTLM di Windows. Include script di rilevamento, applicazione di patch con Ansible e hardening CI/CD. Dimostra l'escalation dei privilegi da accesso ...

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- Il 13 febbraio 2024 Microsoft ha pubblicato una grave vulnerabilità di sicurezza in Microsoft Outlook, identificata come CVE-2024-21413, nota come Moniker Link Vulnerability. La vulnerabilità consente a un attaccante di bypassare il meccanismo...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcard

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcard endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC pat...

Invoke-LinkSpray

Invoke-LinkSpray Script Powershell per creare collegamenti SMB o WebDAV dannosi per rubare l'autenticazione NTLM. Prende percorsi UNC o cartelle locali da un file specificato dal parametro -ShareList. Opzionalmente, -Depth può essere usato per specificare quante cartelle attraversare in ricorsion...

SMB-Penetration-Testing-NTLM-Relay-Version-2-

SMB Penetrationstest – NTLM-Relay-Angriff Red Team Lab – NTLM-Relay via LLMNR-Poisoning, CVE-2007-2447, NTLMv2-Hash-Cracking & NT AUTHORITY\SYSTEM unter Windows 10 Autor Feld| Details ---|--- Name| Younes GitHub| @Youneskc Typ| Penetrationstest-Labor Status| Abgeschlossen Rechtlicher...

cve-2025-24054-lab

CVE-2025-24054 — Laboratorio di Rilevamento e Mitigazione Registro di progetto per un laboratorio di sicurezza difensiva su CVE-2025-24054 , la vulnerabilità New Technology LAN Manager NTLM Hash Disclosure Spoofing di Windows, partendo dal presupposto che il sistema interessato non possa essere...

CVE-2025-24071_PoC

CVE-2025-24071PoC CVE-2025-24071: Perdita di hash NTLM tramite estrazione RAR/ZIP e file .library-ms Windows Explorer avvia automaticamente una richiesta di autenticazione SMB quando un file .library-ms viene estratto da un archivio .rar, portando alla divulgazione dell'hash NTLM. L'utente non de...

knowsmore

Knows More KnowsMore officially supports Python 3.8+. Main features Import NTLM Hashes from .ntds output txt file generated by CrackMapExec or secretsdump.py Import NTLM Hashes from NTDS.dit and SYSTEM Import Cracked NTLM hashes from hashcat output file Import BloodHound ZIP or JSON file BloodHou...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForWildcardRecursive

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForWildcardRecursive endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remot...

LdapRelayScan

LDAP Relay Scan Ein Tool zur Überprüfung von Domänencontrollern auf LDAP-Server-Schutzmaßnahmen im Hinblick auf das Relay von NTLM-Authentifizierung. Wenn dich die Einzelheiten der fehlerbasierten Enumeration interessieren, siehe unten. Details dazu, was getan werden kann, wenn du ein Fehlen von...

hashmuncher

Hash Muncher Sammle NetNTLMv2-Hashes mithilfe von ETW mit Administratorrechten unter Windows Erfordert erhöhten Administrator-Zugriff unter Windows 8.1 / Windows 2016 oder später Verwendet die Ereignisablaufverfolgung für Windows ETW, um Zugriff auf die Rohpaketdaten von...

GetLAPSPassword

GetLAPSPassword Ein schwacher Versuch, ein LAPS-Dumping-Tool zu schreiben, das sowohl NTLM- als auch Kerberos-Authentifizierung mithilfe der Impacket-Bibliothek unterstützt. Die ursprüngliche Struktur dieses Tools stammt aus dem Impacket-Beispiel GetADUsers.py...

CVE-2026-62960

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...

CVE-2026-62960 Git for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...